Oval Definition:oval:org.mitre.oval:def:10767
Revision Date:2013-04-29Version:11
Title:Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
Description:Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-2703
Platform(s):CentOS Linux 3
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • OS Section: RHEL3, CentOS3
  • RHEL3 or CentOS3
  • The operating system installed on the system is Red Hat Enterprise Linux 3
  • OR CentOS Linux 3.x
  • AND Configuration section
  • mozilla-js-debugger is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-chat is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-mail is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-dom-inspector is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-devel is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-nss is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-nss-devel is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-nspr is earlier than 37:1.7.12-1.1.3.2
  • OR mozilla-nspr-devel is earlier than 37:1.7.12-1.1.3.2
  • OR OS Section: RHEL4, CentOS4, Oracle Linux 4
  • RHEL4, CentOS4 or Oracle Linux 4
  • The operating system installed on the system is Red Hat Enterprise Linux 4
  • OR CentOS Linux 4.x
  • OR Oracle Linux 4.x
  • AND Configuration section
  • mozilla-js-debugger is earlier than 37:1.7.12-1.4.1
  • OR devhelp-devel is earlier than 0:0.9.2-2.4.7
  • OR mozilla is earlier than 37:1.7.12-1.4.1
  • OR thunderbird is earlier than 0:1.0.7-1.4.1
  • OR mozilla-chat is earlier than 37:1.7.12-1.4.1
  • OR mozilla-mail is earlier than 37:1.7.12-1.4.1
  • OR mozilla-dom-inspector is earlier than 37:1.7.12-1.4.1
  • OR devhelp is earlier than 0:0.9.2-2.4.7
  • OR mozilla-nss is earlier than 37:1.7.12-1.4.1
  • OR mozilla-devel is earlier than 37:1.7.12-1.4.1
  • OR mozilla-nss-devel is earlier than 37:1.7.12-1.4.1
  • OR firefox is earlier than 0:1.0.7-1.4.1
  • OR mozilla-nspr is earlier than 37:1.7.12-1.4.1
  • OR mozilla-nspr-devel is earlier than 37:1.7.12-1.4.1
    • BACK